AMENDMENT UNDER 37 C.F.R. §1.111 Attorney Docket No.: Q76086 

U.S. Appln. No.: 10/600,643 

AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions and listings of claims in the 

application: 

LISTING OF CLAIMS: 

1. (previously presented): A computer system connected to a data communications 

network, comprising: 

a first computer; 

a second, redundant computer that is independent of the first computer; 

wherein the first computer is configured to match with the second computer by 
comparing a first work result of the first computer with a second work result of the second 
computer; 

wherein receipt of any data from the data communications network is limited to the first 
computer; 

wherein transmission of any data to the data communications network is limited to the 
second computer; 

wherein at least an initial processing of the data received from the data communications 
network is limited to the first computer; and 

wherein the first computer is configured to convert, transmit to and store in the second 
computer non-verified or non- verifiable data received by the first computer only in non- 
processable form. 
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2. (original): The computer system as claimed in claim 1, wherein the first computer is 
configured to verify the received data in the first computer, and wherein the first computer is 
configured to supply only verified data to the second computer in processable form. 

3. (original): The computer system as claimed in claim 1, wherein the first computer and 
the second computer are configured to independently verify the received data, and wherein only 
matching verified data are stored in the second computer in processable form. 

4. (original): The computer system as claimed in claim 1, further comprising: 
a central data memory, 

wherein direct access to internal data of the computer system contained in a central data 
memory is limited to the second computer; and 

wherein the first computer is configured to receive the internal data only upon request via 
the second computer. 

5. (original): The computer system as claimed in claim 1, further comprising: 
an independent, redundant third computer; and 
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wherein the second computer is configured to match with the third computer by 
comparing the second work result of the second computer with a third work result of the third 
computer. 

6. (previously presented): A method, comprising: 

in a first computer, classifying data received from a data communications network as 
verified data and non-verified data, and producing a first work result representing the verified 
data; 

converting the non-verified data into a non-processable form by the first computer; 
forwarding the verified data in processable form and the non-verified data in the non- 
processable form from the first computer to a second computer; 

in the second computer, independently verifying the verified data forwarded from the 
first computer and producing a second work result based on the independent verification; 

comparing the first work result with the second work result; and 

if the first work result and the second work result match, storing the verified data in the 
second computer, 

wherein receipt of any data from the data communication network is limited to the first 
computer and wherein transmission of any data to the data communications network is limited to 
the second computer. 
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7. (canceled). 

8. (original): The method of claim 6, wherein only the second computer directly accesses 
internal data contained in a central data memory, and wherein the first computer indirectly 
accesses the internal data only upon request via the second computer. 

9. (original): The method of claim 6, further comprising matching the second work result 
of the second computer with a third work result of a third computer. 

10. (previously presented): The computer system as claimed in claim 1, wherein 
connection between the first computer and the second computer forms an internal network of the 
computer system and wherein the data communications network is an external network with 
respect to the computer system. 

1 1 . (previously presented): The computer system as claimed in claim 1, wherein the first 
computer independently verifies the received data producing the first work result and wherein 
the second computer independently verifies the received data producing the second work result. 
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12. (previously presented): The computer system as claimed in claim 1, wherein data 
processed by the first computer produces the first work result and wherein data processed by the 
second computer produces the second work result. 

13. (previously presented): The computer system as claimed in claim 12, wherein the first 
and second work results are produced by executing at least one of horizontal parity checks and 
parallel balancing. 

14. (previously presented): The computer system as claimed in claim 1, wherein said 
matching by the first computer with the second computer is performed at an end of a program or 
when memory is being accessed. 

15. (previously presented): The computer system as claimed in claim 1, wherein all of the 
initial processing is performed by the first computer. 

16. (previously presented): The method as claimed in claim 6, wherein connection 
between the first computer and the second computer forms an internal network of the computer 
system and wherein the data communications network is an external network with respect to the 
computer system. 
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17. (previously presented): The method as claimed in claim 6, wherein the first computer 
independently verifies the received data producing the first work result and wherein the second 
computer independently verifies the received data producing the second work result. 

18. (previously presented): The method as claimed in claim 6, wherein data processed by 
the first computer produces the first work result and wherein data processed by the second 
computer produces the second work result. 

19. (previously presented): The method as claimed in claim 6, wherein said matching by 
the first computer with the second computer is performed at an end of a program or when 
memory is being accessed. 

20. (previously presented): The method as claimed in claim 6, wherein all of the initial 
processing is performed by the first computer. 

21. (previously presented): The method as claimed in claim 6, further comprising the 
second computer matching with a redundant, independent third computer by comparing the 
second work result of the second computer with a third work result of the third computer. 
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22. (previously presented): The method as claimed in claim 21, wherein only the second 
and third computers have access to internal data of the computer system and wherein the third 
computer is configured to implement operation and monitoring of an automation system. 

23. (new): The computer system as claimed in claim 5, wherein user inputs are supplied 
via a keyboard or a mouse in parallel to the first computer, the second computer and the third 
computer. 

24. (new): The method as claimed in claim 21, wherein user inputs are supplied via a 
keyboard or a mouse in parallel to the first computer, the second computer and the third 
computer. 
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